CVE-2017-7913

A Plaintext Storage of a Password issue was discovered in Moxa OnCell G3110-HSPA Version 1.3 build 15082117 and previous versions, OnCell G3110-HSDPA Version 1.2 Build 09123015 and previous versions, OnCell G3150-HSDPA Version 1.4 Build 11051315 and previous versions, OnCell 5104-HSDPA, OnCell 5104-HSPA, and OnCell 5004-HSPA. The application's configuration file contains parameters that represent passwords in plaintext.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-17-143-01 Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:moxa:oncell_g3110-hspa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_g3110-hspa:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:moxa:oncell_g3110-hsdpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_g3110-hsdpa:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:moxa:oncell_g3150-hsdpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_g3150-hsdpa:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:moxa:oncell_5104-hsdpa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_5104-hsdpa:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:moxa:oncell_5104-hspa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_5104-hspa:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:moxa:oncell_5004-hspa_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:moxa:oncell_5004-hspa:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-05-29 16:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-7913

Mitre link : CVE-2017-7913

CVE.ORG link : CVE-2017-7913


JSON object : View

Products Affected

moxa

  • oncell_g3110-hspa
  • oncell_g3110-hspa_firmware
  • oncell_5104-hsdpa
  • oncell_5104-hspa
  • oncell_g3150-hsdpa
  • oncell_5004-hspa
  • oncell_5104-hsdpa_firmware
  • oncell_g3110-hsdpa_firmware
  • oncell_5104-hspa_firmware
  • oncell_g3150-hsdpa_firmware
  • oncell_5004-hspa_firmware
  • oncell_g3110-hsdpa
CWE
CWE-522

Insufficiently Protected Credentials

CWE-256

Plaintext Storage of a Password